computer-use-safety

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent observe arbitrary screen content and navigate arbitrary web pages and documents (browser automation, capture, invoke), which an outsider can publish but cannot force the agent to read, so this is low exposure.